Loading...

AVANADE
PRIVACY STATEMENT FOR CALIFORNIA RESIDENTS

In case you have special accessibility needs to access the content of this statement, we recommend that you or someone on your behalf, consults our Accessibility Statement and recommendations.

This privacy statement is effective as of June 7, 2023.

Please note that this privacy statement will regularly be updated to reflect any changes in the way we handle your personal information or any changes in applicable laws. If you are not a California resident, this privacy statement does not apply to you. Please visit the Avanade Privacy Statement for more information.

This Avanade Privacy Statement for California Residents applies to California residents whose personal information is processed by Avanade Inc and/or its affiliates, subsidiaries and newly acquired companies ("Avanade"; "we") pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), including how we protect the personal information (in some countries also referred to as “personal data”) we process and control relating to you (“your personal information”; "your information") and which rights you have in relation to the processing of your personal information.

Any Avanade entity located outside the European Union will for the purposes of compliance with data privacy laws be represented by Avanade Inc.

In this privacy statement, we include specific information on the following:

1. How does Avanade protect your personal information?

Avanade attaches great importance to your right to privacy and the protection of your personal information. We want you to feel secure that when you deal with Avanade, your personal information is in good hands.

Avanade protects your personal information in accordance with applicable laws and our data privacy policies. In addition, Avanade maintains the appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access, or accidental or unlawful destruction of or damage thereto.

The following sections provide further details as to how Avanade processes your personal information:

Which categories of personal information do we collect and how do we process such personal information?
We collect personal information of our employees, potential employees, clients, prospective clients, suppliers, business contacts, shareholders and website users. If the information we collect is not listed in this privacy statement, we will give individuals (when required by law) appropriate notice of which other information will be collected and how it will be used.

Specifically, the personal information we collect includes the categories of personal information described in the sections “How do we use personal information when you visit Avanade’s website?”,"How do we use cookies (and other tracking technologies)?", “How do we use personal information when you visit our offices?” and “How do we use personal information for marketing purposes?”.

The below table provides an overview of the categories of personal information that Avanade processes or may process in the context of the processing activities described in this privacy statement.

Category of personal information Types of personal information captured by category
Personal details, contact details, and identifiers. Name, pronoun, all types of identifiers and contact details (such as e-mail, phone numbers, physical address) and occasionally, when necessary for specific purposes, gender, date of birth, age, place of birth.
Commercial information.

History and records of the products and services you have obtained from Avanade. Correspondence between you and us when it is sent to a dedicated mailbox or via other electronic communication means (including communication channels supported by AI that – for example – generates content to assist our personnel when interacting with you), for the purpose of processing account receivable payments and commercial follow-up.
Marketing and research information a) Identifiers – the IP address, social media handle or other online identifiers of a person, e-mail address/mobile number if used for direct marketing, and name and address
b) Demographic data - (e.g. income, family status, age bracket, gender, interests, pets, home ownership, health, current service providers)
c) Browser/web history data and preferences expressed through selection/viewing/purchase of goods, services and content.
d) Social media content – blogs, posts and anything posted by an individual online or which mentioned/references an individual
e) Analytics and profiles of the individuals based on the data collected on them.
Sensitive data and biometric information.
Avanade may also collect certain types of sensitive information when permitted by local law or with your consent, such as health/medical information (including disability status and dietary requirements/allergies in the framework of the events we organize/sponsor) or biometric information, for example as when you elect to use fingerprint authentication.
Audiovisual materials, including transcriptions. Photograph, and images/footage captured on CCTV or other audio, video and related security/monitoring systems or captured during marketing/public filming events/sessions(including recording of virtual or live workshops or similar events/sessions), voice search functionality to enable a voice command feature that allows you to ask a question and see results (functionality enabled for mobile applications only), and/or audio video recording and transcription during meetings.
Position and professional or employment-related information. Professional or employment-related information, such as description of current position, job title, employer, location, and Avanade contact(s).
System and application access data and Internet and electronic network activity information.

Where you are provided with access to Avanade’s systems, Avanade may collect information required to access such Avanade systems and applications such as System ID, LAN ID, e-mail account, instant messaging account, mainframe ID, system passwords, and internet or other electronic network activity information, including access logs, activity logs, and electronic content produced using Avanade systems.
Cookies and geolocation data As described below, we also may collect geolocation data in some circumstances. Please see our Cookies policy for more details.
Avanade alumni related information
  • Information you provide us when you register as an Avanade alumnus/alumna or update your profile including your name and email address. If you were previously a user of another Avanade alumni website, additional data that you provided to that site may be automatically added to your profile at the Alumni Site. In addition, your user profile offers you the opportunity to provide a wide range of additional data, including postal address, current occupation, industry, education, and personal and business interests.
  • Correspondence between you and us in relation to the Alumni Site.
  • Data you post on the Alumni Site, such as on the chat pages.
  • Responses to online surveys that we use for research and quality control purposes.
  • Details on (former) compensation and payroll.
  • Details on (former) position.
  • Birth year
  • Personal information we already have in our Avanade system such as (former) Enterprise ID, (former) office location, telephone number, home address and education or training – this to verify your identity when registering on our Alumni Site.
Consumer personal information Any other personal information we process of “consumers,” as defined under the CCPA.

In addition, for recruitment/employment purposes, Avanade may process the personal information set out in the below table.

Additional personal details, contact details and identifiers. In addition to the personal details listed above, Avanade may collect additional personal details for recruitment/employment purposes, such as national identification number, social security number, insurance information, marital/civil partnership status, domestic partners, dependents, emergency contact information, and military history.
Education information and professional or employment-related information. Avanade may collect information about your education and professional or employment-related information, such as your employment history.
Sensitive data for recruitment purposes. Avanade may collect certain types of sensitive information when permitted by local law or with your consent, such as health/medical information (including disability status), trade union membership information, religion, race or ethnicity, minority flag, and information on criminal convictions and offences. Avanade collects this information for specific purposes, such as health/medical information in order to accommodate a disability or illness and to provide benefits; background checks and diversity-related personal information (such as race or ethnicity) in order to comply with legal obligations and internal policies relating to diversity and anti-discrimination
Documentation required under immigration laws. Avanade may collect data on citizenship, passport data, and details of residency or work permit (a physical copy and/or an electronic copy).
Financial information for payroll/benefits purposes Your banking and other relevant financial details we need for payroll/benefits purposes.
Talent management information. Information necessary to complete a background check, details on performance decisions and outcomes, performance feedback and warnings, e-learning/training programs, performance and development reviews (including information you provide when asking for/providing feedback, creating priorities, updating your input in relevant tools), driver’s license and car ownership information, and information used to populate biographies.
Requested recruitment information Information requested to provide during the recruitment process, to the extent allowed by applicable law.
Recruitment information you submit Information that you submit in résumés / CVs, letters, writing samples, or other written materials (including photographs).
Information generated by us during recruitment Information generated by interviewers and recruiters, based on their interactions with you or basic Internet searches where allowed under applicable law.
Recruitment information received from third parties Information provided by third-party placement firms, recruiters, or job-search websites, where applicable.
Audiovisual information processed during recruitment Photograph, and images/audio/footage captured on CCTV or other video systems when visiting our office or captured in the course of recruitment events or video recruitment interviews.
Recommendations Recommendations related information provided on your behalf by others.
Immigration Documentation and related information required under immigration laws.
Employment history and background checks Information about your prior employment, education, and where applicable and allowed by applicable law, credit history, criminal records or other information revealed during background screenings.
Health/disability related information for recruitment Information about your health or disability where it is relevant to your ability or availability to work or to a workplace accommodation, subject to legal limits on the timing of collection of such information and other applicable limitations.
Diversity related information Information about race, ethnicity, religion, disability, gender (legal and identity) and/or sexual orientation, for purposes of government reporting where required by law, as well as to understand the diversity characteristics of the candidate pool workforce and undertake analytics, subject to legal limits and consent where applicable.
Assessment information Information generated by your participation in psychological, technical or behavioral assessments. You will receive more information about the nature of such assessments before your participation in any of them.

We also may derive inferences about you based on the information described above and also collect other information about you as described in this privacy statement. If you provide us with personal information of another person (for instance, a potential employee/referral), you are responsible for ensuring that such person is made aware of the information contained in this privacy statement and that the person has given you his/her consent for sharing the information with Avanade.

The above-mentioned categories of personal information have been obtained either directly from you (for example, when you provide information to sign up for a newsletter or register to comment on a forum website) or indirectly from certain third parties (for example, through our website’s technology). Such third parties include our affiliates, public authorities, public websites and social media, suppliers and vendors.

Will we share your personal information with third parties and service providers?
We may transfer personal information to our service providers and professional advisors, public and governmental authorities, Accenture PLC and/or its affiliates or third parties in connection with Avanade’s operation of its business, including any (potential) corporate or commercial transaction. Such third parties may be located in other countries. Before we do so, we shall take the necessary steps to ensure that your personal information will be given adequate protection as required by relevant data privacy laws and Avanade’s internal policies. Avanade may transfer your personal information to any of its global affiliates/partners in furtherance of any visits to our Avanade locations.

For example, we may disclose personal information to third parties for other business purposes as follows:

  • We share your information with third-party service providers that provide services to us, including billing, payment processing, customer service, email deployment, advertising and marketing, security and performance monitoring, maintaining or servicing accounts, processing or fulfilling orders and transactions, verifying customer information, research, data hosting, auditing, and data processing;
  • To protect and defend the legal rights, safety, and security of Avanade, our affiliates, users, or the public, including to protect against fraud and malicious activity; and
  • For other business purposes described in this privacy statement or for any other purpose disclosed to you at the time we collect the information or pursuant to your consent.

We may also share your information in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sale, initial public offering, or in the unlikely event of a bankruptcy.

Unless you are otherwise notified, any transfers of your personal information from within the European Economic Area (EEA) to third parties outside the EEA will be based on an adequacy decision or are governed by the standard contractual clauses (a copy of which can be obtained through the contact information included below). Any other non-EEA related transfers of your personal information will take place in accordance with the appropriate international data transfer mechanisms and standards.

What about sensitive data?
We do not generally seek to collect sensitive data as defined in the second paragraph below (also known as special categories within the EEA) through this site or otherwise. In the limited cases where we do seek to collect such data, we will do this in accordance with data privacy law requirements and/or ask for your consent.

The term "sensitive data" refers to the various categories of personal information identified by data privacy laws as requiring special treatment, including in some circumstances the need to obtain explicit consent from you. These categories include racial or ethnic origin, political opinions, religious, philosophical or other similar beliefs, membership of a trade union, physical or mental health, biometric or genetic data, sexual life or orientation, or criminal convictions and offences (including information about suspected criminal activities).

What about data security?
We maintain organizational, physical and technical security arrangements for all the personal information we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal information and the processing we undertake.

We adopt market leading security measures to protect your personal information. This includes (without being limitative):

  • Avanade’s Information Security Program aligns with the ISO 27001 framework. We also hold an ISO 27001 certification for our Corporate Client Data Protection program and the CMS (Cloud Managed Services) business unit which indicates that we adhere to the highest and strictest information security standards. This certification is an international security standard that is awarded and confirms that Avanade’s processes and security controls provide an effective framework for protecting our clients’ and Avanade’s information.
  • We have a global Client Data Protection (“CDP”) program in place which governs the stewardship of client information and systems entrusted to us.
  • We have regular penetration testing performed by a third-party provider, which continues to show the strength of our technical defenses.

Where will your personal information be processed?
As a global organization with offices and operations throughout the world, personal information we collect may be transferred or be accessible internationally throughout Avanade's global business and between Avanade’s entities and/or its affiliates, including Accenture PLC and/or its affiliates.

Any such transfers throughout Avanade’s global business take place in accordance with the applicable data privacy laws (including the General Data Protection Regulation) and governed by the Avanade Intra-Group Data Protection Agreement (IGDPA) and the Intra-Group Data Processing and Transfer Agreement (IGDTA). Having our Intra-Group Data Protection Agreement (IGDPA) and Intra-Group Data Processing and Transfer Agreement (IGDTA) means that all our group entities which have signed up to these Agreement have to comply with the same internal rules.

What are the sources we get your personal information from?
If we do not obtain your personal information directly from you, we may obtain it from the following sources: publicly available sources (registers or the internet), Avanade employees, contractors, (prospective) members of board of directors, shareholders, Avanade’s affiliates, subsidiaries and newly acquired businesses, employers of our contractors, public authorities, public websites and social media, previous employers, educational institutions, suppliers and vendors (including third party data providers).
In section 5, you can find more information on the sources of your personal information for marketing purposes.

How long will your personal information be retained by us?
We will retain your personal information only for as long as is necessary. We maintain specific records management and retention policies and procedures, so that personal information is deleted after a reasonable time according to the following retention criteria:

  • We retain your information as long as we have an ongoing relationship with you (in particular, if you have an account with us).
  • We will only keep your information while your account is active or for as long as needed to provide services to you.
  • We retain your information for as long as needed in order to comply with our global legal and contractual obligations.

Which rights do you have with respect to the processing of your personal information?

You may be entitled, where provided for under applicable law, to:

  • Request access to the personal information we process about you: this right entitles you to know whether we hold personal information about you and, if we do, to obtain information on and a copy of the specific pieces and categories of personal information.
  • Request a rectification of your personal information: this right entitles you to have your personal information corrected if it is inaccurate or incomplete.
  • Object to the processing of your personal information: this right entitles you to request that Avanade no longer processes your personal information.
  • Request the erasure or deletion of your personal information: this right entitles you to request the erasure or deletion of your personal information, including where such personal information would no longer be necessary to achieve the purposes.
  • Request the restriction of the processing of your personal information: this right entitles you to request that Avanade only processes your personal information in limited circumstances, including with your consent.
  • Request portability of your personal information: this right entitles you to receive a copy (in a portable and, if technically feasible, readily usable format) of your personal information, or request Avanade to transmit such personal information to another data controller.

California law provides California residents with the right to receive a privacy notice with information about what we have collected, disclosed for business purposes, and sold during the preceding 12 months. This Avanade Privacy Statement for California Residents provides information about the categories of information that we have collected, the sources of that information, the purposes for which we have used the information, and the categories of third parties to whom we have disclosed the information for business purposes.

California law also affords California residents a right to opt out of the “sale” of your personal information. This right is applicable to the extent that Avanade is engaging in a “sale” of your personal information as that term is defined under applicable law. While Avanade generally is not in the business of selling information, there are limited circumstances where we share personal information with our clients, third-party partners, or others that we treat as a sale for which California residents have the right to opt out. We do not sell the personal information of minors under 16 years of age without affirmative authorization.

If you choose to exercise your rights, we will not charge you different prices or provide different quality of services unless those differences are related to your personal information or otherwise permitted by law. Please click here to opt out of the “sale” of your personal information. To exercise any other rights available to you under California law, please click here. In addition, you can call +1 844 595 1670 (US Toll free) during the standard Pacific Standard Time (PST) office hours (only available in English). Once we receive your request, we may verify it by requesting information sufficient to confirm your identity. Where necessary, this may include asking you for a copy of your passport or driver’s license. If you would like to use an authorized agent registered with the California Secretary of State to exercise your rights, we may request evidence that you have provided such agent with power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf. We reserve the right to deny requests from authorized agents in certain circumstances, such as where we have a reasonable belief that the request is fraudulent.

Avanade may offer certain financial incentives for the collection, sale, or deletion of personal information. Where we would do so, we will provide California residents additional information where required by California law.

To the extent that the processing of your personal information is based on your consent, you have the right to withdraw such consent at any time by contacting Avanade’s Data Privacy Officer at AvanadeDPO@avanade.com or +1 844 595 1670 (US Toll free). Please note that this will not affect Avanade’s right to process personal information obtained prior to the withdrawal of your consent, or its right to continue parts of the processing based on other legal bases than your consent.

If, despite our commitment and efforts to protect your personal information, you believe that your data privacy rights have been violated, we encourage and welcome individuals to come to Avanade first to seek resolution of any complaint. You have the right at all times to register a complaint directly with the relevant supervisory authority or to make a claim against Avanade with a competent court (either in the country/State where you live, the country where you work or the country where you deem that data privacy law has been infringed).

Please contact AvanadeDPO@avanade.com or +1 844 595 1670 (US Toll free) if you have any questions or concerns about how Avanade processes your personal data or if you want to exercise your rights in relation to your personal.

2. How do we use personal information when you visit Avanade’s website?

In addition to the information set out above, the following sections describe how we use personal information when you visit Avanade’s website:

Which personal information do we gather?
Avanade collects personal information at its websites in two ways: (1) directly (for example, when you provide personal information to sign up for a newsletter or register to comment on a forum website); and (2) indirectly (for example, through our website's technology).

We may collect and process the following personal information:

  • Personal information that you provide by filling in forms on our website. This includes registering to use the website, subscribing to services, newsletters and alerts, registering for a conference or requesting a white paper or further information. Pages that collect this type of personal information may provide further information as to why your personal information is needed and how it will be used. It is completely up to you whether you want to provide it.
  • If you contact us, we may keep a record of that correspondence.
  • We may ask you to complete surveys that we use for research purposes, although you do not have to respond to them.
  • Any postings, comments or other content that you upload or post to an Avanade website.
  • Our website collects personal information about your computer, including (where available) your IP address, operating system and browser type, for system administration, to filter traffic, to look up user domains and to report on statistics.
  • Details of your visits to our website, the pages you view and resources you access or download, including but not limited to, traffic data, (geo) location data, weblogs and other communication data. Please see the Cookies section below for more information.

How do we use personal information that we collect from our websites?
We use personal information for the purposes described in the section “For which purposes and on which legal basis do we use your personal information?” above, as well as to provide you with information you request, process online job applications, and for other purposes which we would describe to you at the point where it is collected. For example:

  • Links to and from the sites of our partner networks, advertisers and affiliates.
  • Certain programs (widgets and apps) of third parties. Where this is the case, note that such third parties may process your personal information collected through such programs for their own purposes.

We analyze your IP and browser information to determine what is most effective about our website, to help us identify ways to improve it and make it more effective. Please see the Cookies section below for more information.

3. How do we use cookies (and other tracking technologies)?

In addition to the information set out above, this section describes how we use cookies and other tracking technologies.

We analyze your IP and browser information to determine what is most effective about our website, to help us identify ways to improve it and, eventually, to determine how we can tailor our website to make it a more positive and relevant user experience.

Please see our Cookies policy for more details, including for information about your choices with respect to Advertising and Social Media Cookies and for access to our cookie consent manager. By using our website, you agree that we and third parties can place cookies and other similar technologies on your device as explained in our Cookies policy.

4. How do we use personal information when you visit our offices?

In addition to the information set out above, this section describes how we use personal information when you visit Avanade offices.

Please click here for further details on how we process your personal information when visiting our offices (this sub-page also relates to the potential processing of your personal information through CCTV and access management systems in case such CCTV and access management systems are active.)

If you have any questions on data privacy or you want to let us know about website/marketing permissions, please Contact Us.

5. How do we use personal information for marketing purposes?

In addition to the information set out above, the following sections describe how we use personal information for marketing purposes:

What are the sources of marketing data?
The bulk of the personal information we collect and use for marketing purposes relates to individual employees of our clients and other companies with which we have an existing business relationship. We may also obtain contact information from public sources, including content made public at social media websites, to make an initial contact with a relevant individual at a client or other company.

Do we send targeted e-mails?
We send commercial e-mail to individuals at our client or other companies with whom we want to develop or maintain a business relationship in accordance with applicable marketing laws. Our targeted e-mail messages typically include web beacons, cookies, and similar technologies that allow us to know whether you open, read, or delete the message, and links you may click. When you click a link in a marketing e-mail you receive from Avanade, we will also use a cookie to log what pages you view and what content you download from our websites, even if you are not registered at or signed into our site.

Targeted e-mails from Avanade may include additional data privacy information, as required by applicable laws.

Do we maintain Customer Relationship Management (CRM) databases?
Like most companies, Avanade uses customer relationship management (CRM) database technology to manage and track our marketing efforts. Our CRM databases include personal information belonging to individuals at our client and other companies with whom we already have a business relationship or want to develop one. The personal information used for these purposes includes relevant business information, such as: contact data, publicly available information (e.g. board membership, published articles, press releases, your public posts on social media sites if relevant for business purposes), your responses to targeted e-mail (including web activity following links from our e-mails), website activity of registered users of our website, and other business information included by Avanade professionals based on their personal interactions with you. If you wish to be excluded from our CRM databases, please use this link.

Do we combine and analyze personal information?
We may combine data from publicly available sources, and from our different e-mail, website, and personal interactions with you (this includes information collected across our different websites such as our careers and corporate sites and information collected when you sign-up or log on to our sites or connect to our sites using your social media credentials (such as LinkedIn and Xing)). We combine this data to better assess your experience with Avanade and to perform the other activities described throughout our privacy statement.

Do we share personal information with third parties?
In addition to the third parties mentioned in the section “Will we share your personal information with third parties?” above, we may share your personal information with marketing agencies.

What are your rights regarding marketing communications?
You can exercise your right to prevent marketing communications to you by checking certain boxes on the forms we use to collect your personal information, or by utilizing opt-out mechanisms in e-mails we send to you. You can also exercise the right to discontinue marketing communications to you, or to have your personal information removed from our customer relationship management (CRM) databases at any time by using this link. In such cases, we will retain minimum personal information to note that you opted out in order to avoid contacting you again. Alternatively, you may want to Contact Us to inform us about your opt-out preferences.

6. Content creation / production activities

In addition to the information set out above and to the extent you would be involved in our content creation/production activities, the following sections describe how we process your personal information in connection with any content creation / production purposes.

Content creation / production activities
Some Avanade entities are in the business of content production. We may process your personal information for these TV, film, marketing, advertising or other related content creation, production and distribution activities.

What personal information do we process in connection with production activities?

  • The personal information that we process for production purposes include images and footage of you and may include your location at the time of filming.
  • If you are a member of the public, we will diligently attempt to make you aware of our location and filming activities in advance and will give you an opportunity not to enter the location where filming is taking place and participate in them.
  • If you are a focus of our filming activities (i.e. a contributor or talent such as an interviewee, extra or actor, as opposed to a member of the public) we will also collect and process your name, contact information and any other information provided in any pre-filming questionnaires and/or release forms, such as next of kin details.
  • We may also collect and process special categories of data a such as health or disability information to the extent that this is necessary to enable us to make any necessary adjustments to our filming arrangements to assist or support you.

If you have any questions on data privacy or any aspects of our production activities, please contact us by using our Contact Us form

7. Contact us

Please click here if:

You can also contact Avanade as data controller of your personal information via our Data Privacy Officer (preferably electronically) or via post, clearly marked for the attention of the Data Privacy Officer, via this address: 1191 Second Avenue, Suite 100, Seattle, WA 98101.

Share this page
CLOSE
Modal window
Contract